Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MSUspds' = '%APPDATA%\wualctc.exe'
- '%APPDATA%\wualctc.exe'
- %TEMP%\TMP111208.tmp
- %APPDATA%\wualctc.exe
- %TEMP%\TMP111208.tmp
- %APPDATA%\wualctc.exe
- %TEMP%\TMP111208.tmp
- 'td#####es.freeddns.com':80
- 'td#####es.freeddns.com':443
- 'mi#######office.3utilities.com':80
- 'mi#######office.3utilities.com':443
- td#####es.freeddns.com/0000/a171671.asp
- mi#######office.3utilities.com/0000/a152156.asp
- DNS ASK td#####es.freeddns.com
- DNS ASK mi#######office.3utilities.com